Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/z4bsjVbTnI81Y7pi92gQtwuMcMA.roa
File: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (raw, json)
Hash identifier: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=
Subject key identifier: CF:86:EC:8D:56:D3:9C:8F:35:63:BA:62:F7:68:10:B7:0B:8C:70:C0
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D5C00CA03161147BB18471A064F890F9
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/z4bsjVbTnI81Y7pi92gQtwuMcMA.roa
Signing time: Fri 04 Jul 2025 14:03:42 +0000
ROA not before: Fri 04 Jul 2025 14:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20738
IP address blocks: 109.106.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:c0:0c:a0:31:61:14:7b:b1:84:71:a0:64:f8:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 4 14:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf86ec8d56d39c8f3563ba62f76810b70b8c70c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:c4:d9:52:ad:11:62:98:a0:1e:ac:c2:69:
83:40:67:b9:53:2c:79:74:5f:c0:dd:0e:ab:83:a9:
6e:0d:21:b2:dc:03:99:8c:09:4e:6d:a4:8c:8f:a7:
20:91:a3:8e:6e:d3:9b:0b:7e:d0:2c:e3:d2:48:6e:
dc:16:3f:0c:31:3d:92:bb:0d:b1:25:cf:72:dd:d4:
7d:a7:33:71:6f:be:0f:c6:22:88:67:09:2d:63:34:
96:4d:77:b3:af:1d:01:c3:90:01:c4:43:71:e3:f8:
06:89:59:f8:76:dd:1d:50:86:08:59:15:f8:53:a2:
e8:d1:d8:4d:a8:6a:0e:a1:35:cc:19:c1:6d:a1:03:
00:7f:b5:36:db:2e:b7:97:2c:e5:fd:3f:65:94:50:
14:8b:26:4d:c8:0e:c1:99:ae:d6:01:0e:6a:5a:5d:
5c:fb:ba:47:86:4e:6e:35:99:33:b5:2c:19:2c:76:
ac:43:34:be:2e:c3:a2:03:c2:13:f1:7c:04:a7:94:
39:b5:e5:31:90:6e:e8:0b:a7:7d:73:0b:44:d0:3d:
10:9f:9d:c8:7a:fc:50:a1:4c:32:b8:6e:40:e9:aa:
fa:39:4c:1a:48:22:de:38:75:ad:ee:17:9b:3d:ff:
42:99:70:3d:d4:12:a2:c4:ad:a9:e8:25:c1:7c:3d:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:EC:8D:56:D3:9C:8F:35:63:BA:62:F7:68:10:B7:0B:8C:70:C0
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/z4bsjVbTnI81Y7pi92gQtwuMcMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.184.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:e2:b7:09:03:1c:c8:c9:03:42:dd:b2:d9:54:e4:86:cf:0c:
41:5e:3d:db:7f:93:f4:53:a5:db:29:2a:08:bd:3d:6f:86:a8:
56:65:dd:e4:e8:bd:10:e5:95:c6:43:e8:58:3e:20:88:2d:1e:
1d:d9:8e:77:db:5a:0b:13:23:7a:44:a5:a2:c0:27:99:23:e1:
05:b7:7a:af:bb:69:5f:58:05:44:b4:0d:6f:d7:49:cc:7e:fb:
d4:71:1b:7b:c4:0f:b4:cc:e2:1d:70:4d:b9:8d:5d:b3:95:93:
d8:8d:10:6b:4c:33:97:47:e8:e9:35:ea:a2:1a:c3:28:b2:44:
b7:04:59:eb:1f:01:ca:05:a0:d6:be:89:30:7c:35:49:0b:84:
46:6d:b8:cb:d3:66:37:9b:7e:dc:5f:3e:28:e0:32:1c:0a:10:
61:04:bc:5e:2c:0e:d5:ea:64:10:19:43:61:89:01:d7:da:e4:
07:df:70:99:ec:70:8e:be:d7:45:43:b5:25:8e:14:16:20:09:
ce:21:8d:49:8a:65:d7:b4:ee:f4:9a:80:3d:91:e7:c3:16:4f:
2e:65:12:28:13:0e:53:00:68:d6:4e:57:fe:2f:31:15:7b:8c:
92:2a:b8:7e:cb:aa:0e:eb:78:57:53:0f:03:4d:3c:50:d7:f6:
e6:5c:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:45 2025 by rpki-client